Identity Management Analyst

Ephraim McDowell Health•Danville, KY

3d•Onsite

About The Position

Under the direction of the Director of Information Technology, the Identity Management Analyst is responsible for the administration, monitoring, and continuous improvement of identity and access management (IAM) systems. This role ensures that user access to systems, applications, and data is secure, compliant, and aligned with business and regulatory requirements. The analyst partners closely with IT, security, HR, and business stakeholders to support identity lifecycle processes and enforce least-privilege access. Exhibits the F.I.R.S.T. values (Friendliness, Innovation, Respect, Service, Trust).

Requirements

2+ years of experience in identity and access management, information security, or systems administration required.
Experience with IAM tools such as Active Directory, Azure AD / Entra ID, Duo, Okta, or similar platforms.
Experience with ticketing systems and IT service management (ITSM) tools.
Excellent oral and written communications skills required.
Strong analytical and troubleshooting skills.

Responsibilities

Administer and maintain identity and access management (IAM) systems for all users including associates, contractors, and external users.
Manage identity lifecycle processes for clinicians, staff, contractors, students, and vendors (joiners, movers, leavers).
Provision and deprovision access to healthcare applications, including, but not limited to, the EHR, imaging systems, clinical portals, and all systems requiring a login.
Enforce least-privilege access and role-based access control (RBAC) aligned with job functions and clinical workflows.
Support single sign-on (SSO), multi-factor authentication (MFA), and contextual access controls in clinical environments.
Conduct regular access reviews and audits to ensure compliance with HIPAA, HITECH, and organizational policies.
Partner with HR, compliance, clinical leadership, and IT teams to validate access requirements and resolve discrepancies.
Monitor, investigate, and remediate access-related incidents, including inappropriate or unauthorized access to ePHI.
Support identity integrations with cloud-based healthcare applications and third-party systems.
Maintain documentation for IAM processes, access standards, and audit evidence.
Assist with IAM-related risk assessments, regulatory audits, and security reviews.
Identify opportunities to automate access provisioning and reduce manual processes.
Perform other related duties as assigned.